# CVEs published 2010-06-17 28 CVEs were published on June 17, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2008-4389](https://cve.now/CVE-2008-4389.md): Symantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not properly perform authentication, which allows re (no CVSS) - [CVE-2010-0540](https://cve.now/CVE-2010-0540.md): Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 b (no CVSS) - [CVE-2010-0541](https://cve.now/CVE-2010-0541.md): Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote (no CVSS) - [CVE-2010-0543](https://cve.now/CVE-2010-0543.md): ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS) - [CVE-2010-0545](https://cve.now/CVE-2010-0545.md): The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply t (no CVSS) - [CVE-2010-0546](https://cve.now/CVE-2010-0546.md): Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conj (no CVSS) - [CVE-2010-1373](https://cve.now/CVE-2010-1373.md): Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2010-1374](https://cve.now/CVE-2010-1374.md): Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to cr (no CVSS) - [CVE-2010-1375](https://cve.now/CVE-2010-1375.md): NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local (no CVSS) - [CVE-2010-1376](https://cve.now/CVE-2010-1376.md): Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbit (no CVSS) - [CVE-2010-1377](https://cve.now/CVE-2010-1377.md): Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-mid (no CVSS) - [CVE-2010-1379](https://cve.now/CVE-2010-1379.md): Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a (no CVSS) - [CVE-2010-1380](https://cve.now/CVE-2010-1380.md): Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2010-1381](https://cve.now/CVE-2010-1381.md): The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows (no CVSS) - [CVE-2010-1382](https://cve.now/CVE-2010-1382.md): Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users (no CVSS) - [CVE-2010-1411](https://cve.now/CVE-2010-1411.md): Multiple integer overflows in the Fax3SetupState function in tif\_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in A (no CVSS) - [CVE-2010-1635](https://cve.now/CVE-2010-1635.md): The chain\_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2010-1642](https://cve.now/CVE-2010-1642.md): The reply\_sesssetup\_and\_X\_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to tri (no CVSS) - [CVE-2010-1748](https://cve.now/CVE-2010-1748.md): The cgi\_initialize\_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10 (no CVSS) - [CVE-2010-1964](https://cve.now/CVE-2010-1964.md): Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2010-2063](https://cve.now/CVE-2010-2063.md): Buffer overflow in the SMB1 packet chaining implementation in the chain\_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 all (no CVSS) - [CVE-2010-2313](https://cve.now/CVE-2010-2313.md): Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic\_quotes\_gpc is disabled (no CVSS) - [CVE-2010-2314](https://cve.now/CVE-2010-2314.md): PHP remote file inclusion vulnerability in nucleus/plugins/NP\_Twitter.php in the NP\_Twitter Plugin 0.8 and 0.9 for Nucleus, when register\_gl (no CVSS) - [CVE-2010-2315](https://cve.now/CVE-2010-2315.md): PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2010-2316](https://cve.now/CVE-2010-2316.md): Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2010-2317](https://cve.now/CVE-2010-2317.md): Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search (no CVSS) - [CVE-2010-2318](https://cve.now/CVE-2010-2318.md): Cross-site scripting (XSS) vulnerability in cms\_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2010-2319](https://cve.now/CVE-2010-2319.md): SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page par (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-06-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.